From bcff49197e12abcc40b562a99d8627a5749a6bbe Mon Sep 17 00:00:00 2001
From: xfnw <xfnw@riseup.net>
Date: Mon, 11 Aug 2025 12:43:32 -0400
Subject: [PATCH] catgirl: replace libressl with libretls

catgirl cannot find the system ca store using latest libressl:

catgirl: tls_connect: failed to open CA file 'etc/ssl/cert.pem': No such file or directory
---
 pkgs/by-name/ca/catgirl/package.nix | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ca/catgirl/package.nix b/pkgs/by-name/ca/catgirl/package.nix
index b921bdde8829..fbe42bbe5c8c 100644
--- a/pkgs/by-name/ca/catgirl/package.nix
+++ b/pkgs/by-name/ca/catgirl/package.nix
@@ -2,7 +2,8 @@
   ctags,
   fetchurl,
   lib,
-  libressl,
+  libretls,
+  openssl,
   ncurses,
   pkg-config,
   stdenv,
@@ -19,12 +20,12 @@ stdenv.mkDerivation (finalAttrs: {
 
   # catgirl's configure script uses pkg-config --variable exec_prefix openssl
   # to discover the install location of the openssl(1) utility. exec_prefix
-  # is the "out" output of libressl in our case (where the libraries are
+  # is the "out" output of openssl in our case (where the libraries are
   # installed), so we need to fix this up.
   postConfigure = ''
-    substituteInPlace config.mk --replace \
+    substituteInPlace config.mk --replace-fail \
       "$($PKG_CONFIG --variable exec_prefix openssl)" \
-      "${lib.getBin libressl}"
+      "${lib.getBin openssl}"
   '';
 
   nativeBuildInputs = [
@@ -32,7 +33,8 @@ stdenv.mkDerivation (finalAttrs: {
     pkg-config
   ];
   buildInputs = [
-    libressl
+    libretls
+    openssl
     ncurses
   ];
   strictDeps = true;